communication #96524
closed2021-09-07 18:00 UTC: openSUSE Heroes meeting September 2021
0%
Description
Where: https://meet.opensuse.org/heroes
When: 2021-09-07 18:00 UTC / 20:00 CEST
Who: The openSUSE Heroes team and everybody else!
Topics
see/use checklist
Checklist
- Questions and answers from the community
- status reports about everything
- review old tickets
- Help with Backup server/service wanted (see #95144)
- How to handle "secured" machines? (see 95144)
- Help with PostgreSQL setup wanted (see #95144)
- Create an infrastructure survey? (see #95144)
- Should we open survey.opensuse.org to allow more survey creations?
Updated by cboltz over 3 years ago
- Category set to Event
- Assignee set to opensuse-admin
- Private changed from Yes to No
Updated by lrupp over 3 years ago
- Checklist item changed from [ ] Questions and answers from the community, [ ] status reports about everything, [ ] review old tickets, [ ] Help with Backup server/service wanted (see #95144), [ ] How to handle "secured" machines? (see 95144), [ ] Help with PostgreSQL setup wanted (see #95144), [ ] Create an infrastructure survey? (see #95144) to [ ] Questions and answers from the community, [ ] status reports about everything, [ ] review old tickets, [ ] Help with Backup server/service wanted (see #95144), [ ] How to handle "secured" machines? (see 95144), [ ] Help with PostgreSQL setup wanted (see #95144), [ ] Create an infrastructure survey? (see #95144), [ ] Should we open survey.opensuse.org to allow more survey creations?
survey.opensuse.org¶
Was updated from 4.4.0 to 4.6.3 (including DB schema upgrade) without big problems.
At the moment, there is just a limited amount of users, who can create surveys. Should we open this up to allow more people to create surveys - or to participate with their openSUSE account in surveys?
Updated by lrupp over 3 years ago
conncheck.opensuse.org¶
conncheck.opensuse.org is currently distributed between Provo and Nuremberg:
~> host conncheck.opensuse.org
conncheck.opensuse.org has address 91.193.113.65
conncheck.opensuse.org has address 195.135.221.140
conncheck.opensuse.org has IPv6 address 2a07:de40:401::65
conncheck.opensuse.org has IPv6 address 2001:67c:2178:8::16
We have two haproxy servers on both ends, which handled the request directly (without any backend involved).
Updated by lrupp over 3 years ago
Matomo¶
Core (4.4.1) + Plugins packaged and updated to latest version. Enhanced Apparmor profile, thanks to cboltz.
Moodle¶
Core (3.11.2) + Plugins packaged and updated to latest version
Old logs on pontifex¶
Wrote a little script (pontifex:/root/bin/copy_logs_to_backup.sh) that moves all xz'ed logs below /var/log to a folder on our backup machine (backup.infra.opensuse.org). This freed up the disk again.
Matrix¶
Attached a 100G disk for /var/log/matrix-synapse. This, together with the 60G /data disk, should give us enough room for the moment. TODO: lower the log level for matrix-synapse and the bridges (esp. discord seems to be in debug mode).
Updates¶
Installed updates on all machines, as usual.
- salt.infra.opensuse.org -> have a look at the scripts in /root/bin/salt_update_all
- all salt'ed machines (beside Fedora) now have /usr/sbin/zypper_ps_restart.sh installed
fedora-accounts.infra.opensuse.org -> dnf update prints:
Problem 1: cannot install the best update candidate for package noggin-0.0.1~git20200417.ff06b4b-0.fc32.2.noarch
- nothing provides (python3.8dist(flask-healthz) >= 0.0.1 with python3.8dist(flask-healthz) < 0.0.2) needed by noggin-0.0.1+git20201028.542001b-0.fc32.1.noarch
Problem 2: package noggin-theme-openSUSE-0.0.1+git20201028.542001b-0.fc32.1.noarch requires noggin = 0.0.1+git20201028.542001b-0.fc32.1, but none of the providers can be installed
- cannot install the best update candidate for package noggin-theme-openSUSE-0.0.1~git20200417.ff06b4b-0.fc32.2.noarch
- nothing provides (python3.8dist(flask-healthz) >= 0.0.1 with python3.8dist(flask-healthz) < 0.0.2) needed by noggin-0.0.1+git20201028.542001b-0.fc32.1.noarch
Monitoring¶
Status: 79 hosts; 1652 Services
widehat¶
widehat.opensuse.org aka rsync.opensuse.org is currently reachable only from it's external interface (ssh port is open). The underlying hypervisor machine is currently not reachable (Lars needs to visit the external DC to fix this).
Updated by cboltz over 3 years ago
- Status changed from New to Closed
2021-09-07 heroes meeting
status.o.o:
- sql injection hotfixed
- we need to switch to the new upstream (https://github.com/fiveai/Cachet) - WIP
code.o.o ssh access:
- https://progress.opensuse.org/issues/94375
- added public IP to allow ssh access
- TODO: adjust ssh config, firewall, switch DNS, get SSL certificate for https (dehydrated)
code.o.o incoming mails (ticket replies etc.):
- needs to be configured in DNS and mx*
handling member mail addresses:
- https://code.opensuse.org/project/membership
- discuss technical details with membership officials
- mail addresses should be obfuscated (to make spammers' life hard)
code.o.o CI
- need to setup a new jenkins instance
backup server
- server is available
- we'll probably use BorgBackup
Should we open survey.opensuse.org to allow more survey creations?
- we'll create accounts on request
- for not-so-official surveys, you can use forums.o.o
Create an infrastructure survey? (see #95144)
- postponed to next meeting
Several status updates are listed above.